The article mentions Instagram DMs. I don’t think those could be spoofed. Law enforcement would have to care and Instagram would need to get a subpoena, but they should be able to provide a lot of info on the account that sent the message (geoip, behavior, etc).